One-sentence video generation via chilltion
PassAudited by ClawScan on May 11, 2026.
Overview
This is a straightforward Chilltion API wrapper, but users should know it requires a Chilltion API key and includes broad wording about calling any Chilltion API endpoint.
Before installing, make sure you are comfortable giving this skill a Chilltion API key. Keep use to the listed video/session/credit scripts unless you deliberately approve a specific extra API endpoint, and be aware that creating video sessions may consume Chilltion credits.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used beyond the listed endpoints, the agent may make account-affecting Chilltion API requests with the user's key.
The skill advertises use for arbitrary Chilltion /api endpoints, which is broader than the listed fixed scripts and could lead to credentialed API calls outside the normal video-generation workflow.
或调用 Chilltion 的任意 /api 端点时使用
Use the documented scripts for normal video generation and account queries; require explicit user confirmation before calling any unlisted endpoint or any action that could spend credits or modify account data.
Anyone or anything using this skill with the API key can access Chilltion account functions exposed by the scripts, including creating sessions and viewing credit information.
The scripts require a Chilltion API key and attach it as a Bearer token to requests sent to the configured base URL. This is expected for the service, but it is sensitive account authority.
: "${CHILLTION_BASE_URL:=https://chilltion.com}"
...
CHILLTION_AUTH="Authorization: Bearer ${CHILLTION_API_KEY}"Provide only a Chilltion API key you trust the skill to use, keep CHILLTION_BASE_URL pointed at the official service unless you control the alternative, and rotate the key if it may have been exposed.